Medium severity · published Dec 4, 2019
CVE-2019-11216
BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality
6.5
CVSS
1.8%
EPSS
No
On KEV
Description
BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Remedy Smart Reporting · Bmc
9.1.03 through 9.1.03.001; 9.1.04 through 9.1.04.002; 18.05 through 18.05.05; 19.02 through 19.02.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-11216
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-11216
Exploit
http://packetstormsecurity.com/files/155552/BMC-Smart-Reporting-7.3-20180418-XML-Injection.html
Exploit
http://seclists.org/fulldisclosure/2019/Dec/7
Product
https://docs.bmc.com/docs/itsm90/export-and-import-repository-509983929.html
More from Remedy Smart Reporting
5.4
CVE-2019-1010147
Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation